Workspace Gateway privacy policy

Nessoris Workspace Gateway ("the Gateway") is a private tool operated by Nessoris ("Nessoris", "we"). It lets an authorised Nessoris user connect their own Google accounts to an AI assistant so the assistant can help with email, files and calendars. It is not offered to the general public.

What the Gateway accesses

When the account owner signs in with Google and approves access, the Gateway can, on their instruction, use their Gmail, Google Drive, Google Calendar, Google Docs, Sheets and Slides. It acts only when the account owner asks the assistant to do something, such as searching mail, saving an attachment to Drive, or drafting a message.

What we store

• An encrypted Google sign-in token for each connected account, so the owner does not have to sign in again for every request.
• A short activity log of actions the Gateway took (for example "sent an email" or "saved a file"), kept for 90 days. The log records what was done and to which item, not message or file contents.

We do not keep copies of emails, documents or attachments. Content is read when requested, passed to the assistant for that task, and not stored by the Gateway.

How we use Google data

We use Google user data only to carry out the actions the account owner requests inside the Gateway. We do not sell it, do not use it for advertising, and do not use it to train generalised AI models. We do not share it with third parties, except the infrastructure and AI service providers needed to run the Gateway (Cloudflare for hosting, and the AI assistant the owner chose to use), solely to perform the requested task. Nobody at Nessoris reads connected accounts' data except the account owner.

The Gateway's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Security

Tokens are encrypted at rest. Access to the Gateway requires sign-in with an approved Google identity. Sending is rate-limited, and sensitive actions can require explicit confirmation.

Your choices

You can disconnect any account at any time, either through the Gateway or at myaccount.google.com/permissions, which immediately revokes access. On request we will delete the stored token and activity log for your account.

Changes

We may update this policy; the date above shows the latest version.

Contact

jakub@nessoris.com

Company details

Nessoris services are provided by vitX Global Pte. Ltd., a company registered in Singapore.